GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, keda-fips, crossplane-provider-aws-cloudfront, eksctl, mods, trivy-operator-fips, sops-fips, google-guest-agent-manager, crossplane-provider-aws-memorydb, gitea-fips, coder-fips, opentofu, knative-eventing-fips, gitlab-runner-fips, ko-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, keda-fips, crossplane-provider-aws-cloudfront, eksctl, mods, trivy-operator-fips, sops-fips, google-guest-agent-manager, crossplane-provider-aws-memorydb, gitea-fips, coder-fips, opentofu, knative-eventing-fips, gitlab-runner-fips, ko-fips,...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-pages...

CVE-2026-8144 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-FQVQ-P2GC-C297 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

GHSA-C73G-R4CP-2XMG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

CLEANSTART-2026-XN20660 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH77232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 18.7.1-r0

Multiple security vulnerabilities affect the gitlab-pages-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, authservice, sftpgo-plugin-kms, terraform-provider-google, cluster-api-gcp-controller, neuvector-sigstore-interface, otel-cli, crossplane-provider-aws-elasticache, crossplane-provider-aws-firehose, newrelic-fluent-bit-output,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, authservice, sftpgo-plugin-kms, terraform-provider-google, cluster-api-gcp-controller, neuvector-sigstore-interface, otel-cli, crossplane-provider-aws-elasticache, crossplane-provider-aws-firehose, newrelic-fluent-bit-output,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, crossplane-provider-aws-elasticache, kyverno, nri-rabbitmq, sbomqs, kuberlr, mc, kube-logging-operator-custom-runner, knative-eventing, delve, crossplane-provider-aws-rds, snyk-cli, oras, gitleaks, consul-k8s, step-issuer,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, crossplane-provider-aws-elasticache, kyverno, nri-rabbitmq, sbomqs, kuberlr, mc, kube-logging-operator-custom-runner, knative-eventing, delve, crossplane-provider-aws-rds, snyk-cli, oras, gitleaks, consul-k8s, step-issuer,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, wazero, crossplane-provider-aws-elasticache, kyverno, nri-rabbitmq, sbomqs, kuberlr, mc, kube-logging-operator-custom-runner, knative-eventing, delve, crossplane-provider-aws-rds, snyk-cli, oras, gitleaks, consul-k8s, step-issuer,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, opentelemetry-collector, step-ca, cloud-provider-aws-fips, keda-fips, kubernetes-csi-node-driver-registrar-fips, kubernetes-dashboard-fips, ops-agent, crossplane-provider-aws-cloudfront, mods, trivy-operator-fips, go-spdk-helper-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, step-ca, kubernetes-csi-node-driver-registrar-fips, keda-fips, ops-agent, kubernetes-dashboard-fips, crossplane-provider-aws-cloudfront, trivy-operator-fips, sops-fips, dapr-fips, nvidia-container-toolkit, cass-operator-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, opentelemetry-collector, step-ca, cloud-provider-aws-fips, keda-fips, kubernetes-csi-node-driver-registrar-fips, kubernetes-dashboard-fips, ops-agent, crossplane-provider-aws-cloudfront, mods, trivy-operator-fips, go-spdk-helper-fips,...